Application No.: 10/696,621 

AMENDMENT TO THE CLAIMS 

Please amend the claims as follows: 

1 . (Currently amended) A method for updating an inherent key-encrypted program 
in a system including an LSI device and an external memory, the inherent key-encrypted 
program being generated by encryption with an inherent key unique to the LSI device and being 
stored in the external memory, the method comprising: 

a step of transmitting by the system an ID of the LSI device and an application ID which 
is identification information of an update object program to a server; 

a step of determining by the server whether or not the update object program may be 
transmitted based on the transmitted ID and application ID, and transmitting by the server 
additional information of the update object program if it is determined that the update object 
program may be transmitted; 

a step of determining by the system whether or not program update is possible based on 
the transmitted additional information, and requesting by the system to the server to transmit a 
common key-encrypted program generated by encryption with a common key if it is determined 
that program update is possible; 

a first step of receiving by the system [[a]] the common key-encrypted program generated 
by encryption with a common key and transmitted from [[a]] the server; 

a second step of decrypting by the system the received common key-encrypted program 
to generate a raw program; and 

a third step of re-encrypting by the system the raw program with the inherent key and 
storing the re-encrypted program in the external memory as a new inherent key-encrypted 
program. 
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2. (Original) The program update method of claim 1 , further comprising the steps 

of: 

receiving by the system common key information transmitted from the server; and 
generating by the system a raw common key using the received common key 
information, 

wherein at the second step, the raw common key is used to decrypt the common key- 
encrypted program. 

3. (Original) The program update method of claim 2, wherein the common key 
information includes an encrypted common key generated by encrypting the raw common key 
with a raw first intermediate key, and an encrypted first intermediate key generated by 
encrypting the raw first intermediate key with a raw second intermediate key. 

4. (Original) The program update method of claim 1 , wherein: 

the LSI device includes an internal memory in which inherent key information is stored; 
the system uses the inherent key information stored in the internal memory to generate a 
raw inherent key at boot-up of the system; and 

at the third step, the raw inherent key is used for re-encrypting the raw program. 

5. (Original) The program update method of claim 4, wherein the inherent key 
information includes an encrypted inherent key generated by encrypting the raw inherent key 
with a raw third intermediate key and an encrypted second intermediate key generated by 
encrypting the raw third intermediate key with a raw fourth intermediate key. 



WDC99 1476443-1.060188.0694 



3 



Application No.: 10/696,621 

6. (Ori ginal) The program update method of claim 4, wherein the generated raw 
inherent key is stored in a register of the LSI device and is used for decrypting the inherent key- 
encrypted program to a raw program for execution of the inherent key-encrypted program. 

7. (Original) The program update method of claim 1 , wherein: 
the LSI device includes a boot ROM in which a boot program is stored; 

the external memory includes an acquisition program for establishing data transmission 
between the LSI device and a server; and 

the system executes reception of the common key-encrypted program based on the 
acquisition program stored in the external memory, and controls update processing performed 
after the reception of the common key-encrypted program based on the boot program stored in 
the boot ROM. 

8. (Original) The program update method of claim 1 , further comprising the step of 
receiving a HASH value of the raw program transmitted from the server, 

wherein at the second step, the received HASH value is used to perform a HASH 
verification on the decrypted raw program. 

9. (Withdrawn) A server which operates for program update in a system including 
an LSI device, the server executing: 

a first step of receiving from the system an ID of the LSI device and an application ID 
which is identification information of an update object program; 
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a second step of referring a first table which indicates correspondences between 
application IDs and LSI IDs to determine whether or not the update object program is 
transmitted to the system; and 

if it is determined at the second step that the update object program is transmitted to the 
system, a third step of transmitting to the system a common key-encrypted program generated by 
encrypting the update object program with a common key and common key information from 
which the common key is derived. 

10. (Withdrawn) The server of claim 9, executing: 

a fourth step of receiving from the system a signal which requests application inherent 
information necessary for execution of the update object program; and 

a fifth step of referring to a second table which indicates correspondence between a 
transmission history of the application inherent information and the LSI IDs to determine 
whether or not the application inherent information requested at the fourth step is transmitted. 

1 1 . (Withdrawn) The server of claim 9, wherein the common key information 
includes an encrypted common key generated by encrypting a raw common key with a raw first 
intermediate key and an encrypted first intermediate key generated by encrypting the raw first 
intermediate key with a raw second intermediate key. 
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